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DETAILED ACTION 

1 . A request for continued examination under 37 CFR 1.114, including ttie fee set fortli in 37 CFR 
1.17(e), was filed in this application after final rejection. Since this application is eligible for continued 
examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the 
finality of the previous Office action has been withdrawn pursuant to 37 CFR 1.114. Applicant's 
submission filed on March 16, 2009 has been entered. 

2. Claims 1-22 and 29 are canceled. 

3. Claims 23-28 and 30-42 have been amended 

4. Claims 23-28 and 30-42 are pending. 

Response to Amendment 

5. Applicant's arguments with respect to claims 23-28 and 30-42 have been considered but are 
moot in view of the new ground(s) of rejection. 

6. Applicant's argument filed on March 16, 2009, with respect to the objection of claim 39 has been 
fully considered in view of the amendment and is persuasive. The objection of claim 39 has been 
withdrawn. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth m section 
102 of this title, if the differences between the subject matter soiiglit to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains. Patentabihty shall not be negatived by the manner in which the 
invention was made. 
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8. Claims 23-28 and 30-42 are rejected under 35 U.S.C. 103(a) as being unpatentable over Gaskins 
at al (Gaskins) (US 5,606,315) in view of Hale (US 5,355,414) and further in view of Gardner (US 
7,272,832). 

As per claim 23 Gaskins discloses: 

A security system for an electronic device having a memory available for use by an operating 
system for the electronic device, the security system comprising: a means arranged to interact with the 
electronic device to acquire at least a portion of the memory and remove the memory from being 
available for use by the operating system; (column 1 , line 5-7, the invention relates to a method of 
operating an electronic control module and particularly to a method of securing protected data stored in 
such a module) and (column 3, line 32-35, the ROM 16 also contains security logic which is used to 
prevent unauthorized access to sensitive data stored in the EEPROM 20. The EEPROM has an address 
for a password, and addresses for sensitive data, particularly calibration parameters, as well as 
addresses for non-sensitive data). 

An access system arranged to control access to the acquired memory independently of an 
operating system of the electronic device; (abstract, line 1-5, a microprocessor based electronic control 
module with an EEPROM for storing protected data allows the data to be used internally, and allows non- 
sensitive data to be accessed by external communication tools, but prohibits access to the protected data 
unless a password is first entered). 

A filter driver configured to intercept read/write operations to the memory of the electronic device 
and interact with the acquired portion of the memory based on the intercepted read/write operations 
independent of the operating system. (Column 3, line 48-65, the messages are routed to the security logic 
program which filters the messages, passing those dealing with non-sensitive data, and evaluating 
whether other messages should be honored). 

Gaskins fail to teach the system of intercepting read/write operations to the memory and 
acquiring memory independently of an operating system of the electronic device. However, in the same 
field of endeavor. Hale teaches this limitation as, (column 2, line21-28, the security measures generally 
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involve the keyboard controller preventing transfer of any data to the host computer from the peripheral 
input devices connected to the keyboard controller. In other words, while security is active, the keyboard 
controller does not allow any transfers to the host computer via the keyboard controller) and (column 7, 
line 30-35, the security system instructions to carry out the operations illustrated in the flowcharts are 
stored in the memory 220 and executed by the keyboard controller 120, independent of the host 
operating system). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Gaskins and include the system of intercepting read/write 
operations to the memory and acquiring memory independently of an operating system of the electronic 
device using the teaching of Hale in order to secure the system by making the memory virtually 
inaccessible to the device operating system (see column 2, line 55-63). 

The combination of Gaskins and Hale teaches securing a memory as (column 3, line 32-35 of 
Gaskins and column 4, line 9-15, of Hale), but fails to disclose removing the memory form being available 
for use by the operating system. However, in the same field of endeavor Gardner teach this limitation as, 
(column 21 , line 20-26, using the memory management services of SPK 36, a user application is able to 
create secure memory partitions and processes to protect information in memory from all other 
applications and operating systems running on the system, even including the operating system under 
which it is running). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of invention 
was made, to modify the teaching of Gaskins and Hale to include the system for removing the memory 
from being available for use by the operating system using the teaching of Gardner in order to prevent 
unauthorized access to the data by other users and system administrator (see column 2, line 15-32 of 
Gardner). 

Claims 34 and 42 are rejected under the same reason set forth in rejection of claim 23: 



As per claim 24 Gaskins in view of Hale and further in view of Gardner discloses: 
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A system as claimed in claim 23, wherein the means arranged to interact with the electronic 
device is arranged to interact directly with the operating system, (column 1 , line 5-7, This invention relates 
to a method of operating an electronic control module and particularly to a method of securing protected 
data stored in such a module) and (column 3, line 25-32, The microprocessor unit (MPU) communicates 
with the rest of the system by an 8 bit bi-directional data bus). 

Claim 35 is rejected under the same reason set forth in rejection of claim 24: 

As per claim 25 Gaskins in view of Hale and further in view of Gardner discloses: 
A system as claimed in claim 23, wherein the means arranged to interact with the electronic 
device is arranged to interact with a memory management unit of the device. (Column 3, line 38-43, the 
EEPROM has an address for a password, and addresses for sensitive data, particularly calibration 
parameters, as well as addresses for non-sensitive data. The RAM 18 temporarily stores data which may 
be read from various locations determined in accord with the program stored in the ROM). 

Claim 36 is rejected under the same reason set forth in rejection of claim 25: 

As per claim 26 Gaskins in view of Hale and further in view of Gardner discloses: 
A system as claimed in any claim 25, wherein the memory management system is manipulated 
to remove references to the acquired memory. (Abstract, 11-15, when a password can not be found and it 
is necessary to change the protected data, the unit can be recovered by a recover procedure wherein the 
secure data is first erased and then the security is deactivated to grant free access). 

Claim 37 is rejected under the same reason set forth in rejection of claim 26: 



As per claim 27 Gaskins in view of Hale and further in view of Gardner discloses: 
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A system as claimed in claim 25, wherein the access system is arranged to control access to at 
least selected registers of the memory management unit. (Abstract, line 1-7, a microprocessor based 
electronic control module with an EEPROM for storing protected data allows the data to be used 
internally, and allows non-sensitive data to be accessed by external communication tools, but prohibits 
access to the protected data unless a password is first entered). 

Claim 38 is rejected under the same reason set forth in rejection of claim 27: 

As per claim 28 Gaskins in view of Hale and further in view of Gardner discloses: 
A system as claimed in claim 23, wherein the acquired memory is hidden from the operating 
system, (abstract, line 1-5, a microprocessor based electronic control module with an EEPROM for 
storing protected data allows the data to be used internally, and allows non-sensitive data to be accessed 
by external communication tools, but prohibits access to the protected data unless a password is first 
entered). 

Gaskins fail to teach the system of acquiring memory independently of an operation system of the 
electronic device. However, in the same field of endeavor. Hale teaches this limitation as, (column 7, line 
30-35, the security system instructions to carry out the operations illustrated in the flowcharts are stored in 
the memory 220 and executed by the keyboard controller 120, independent of the host operating system). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Gaskins and include the system of acquiring memory 
independently of an operating system using the teaching of Hale in order to secure the system by making 
the memory virtually inaccessible to the device operating system (see column 2, line 55-63). 

Claim 39 is rejected under the same reason set forth in rejection of claim 28: 

As per claim 30 Gaskins in view of Hale and further in view of Gardner discloses: 
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A system as claimed in claim 23, wherein the electronic device comprises a selected one of a 
personal digital assistant (PDAs), a mobile telephone and a laptop. (Abstract, line 1-7, microprocessor 
based electronic control module with an EEPROM for storing protected data allows the data to be used 
internally). 

As per claim 31 Gaskins in view of Hale and further in view of Gardner discloses: 
A system as claimed in claim 23, wherein the access system is arranged to protect at least 
selected registry settings associated with the acquired memory such that they cannot be modified by 
other applications. (Column 1 , line 5-8, the invention relates to a method of operating an electronic control 
module and particularly to a method of securing protected data stored in such a module). 

Claims 32, 40 and 41 are rejected under the same reason set forth in rejection of claim 31 : 

As per claim 33 Gaskins in view of Hale and further in view of Gardner discloses: 
A system, as claimed in claim 23, wherein the memory acquired, is used to store the 
encryption/decryption key or keys of the encryption system. (Abstract, line 5-9, the data may be read from 
memory and the data or the password may then be changed. For a given model of control module, an ID 
number is assigned to the password and stored in the module). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to TESHOIVIE HAILU whose telephone number is (571)270-3159. The examiner can normally 
be reached on Mon-Fri 7:30a.m. to 5:00p.m. EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative 
or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 
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